@geoly-ai/social-hub-cli 0.2.20 → 0.2.22

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to `@geoly-ai/social-hub-cli` are documented in this file.
 
 Release workflow: `pnpm release:cli` → `pnpm publish:cli`.
 
+## [0.2.22] - 2026-07-23
+
+### Added
+
+- Trigger P1-D3 —— 四眼 registry 管理面 CLI 命令(social-hub)
+
+## [0.2.21] - 2026-07-22
+
+### Added
+
+- 支持受限主体 + 维度派发前鉴权(板块情报收尾 B)
+- 评论回灌直接带分析标签 + 正文编辑标签失效(板块情报收尾 A)
+
 ## [0.2.20] - 2026-07-22
 
 ### Added

package/dist/cmd-manifest.json

@@ -1,6 +1,6 @@
 {
-  "generatedAt": "2026-07-22T10:57:09.278Z",
-  "cliVersion": "0.2.20",
+  "generatedAt": "2026-07-23T02:34:54.974Z",
+  "cliVersion": "0.2.22",
   "commands": [
     "accounts",
     "accounts brand-bindings",
@@ -67,6 +67,24 @@
     "brand-fit",
     "brand-fit migrate",
     "brand-fit show",
+    "brand-fit-registry",
+    "brand-fit-registry avoid-contexts",
+    "brand-fit-registry avoid-contexts list",
+    "brand-fit-registry avoid-contexts show",
+    "brand-fit-registry proposals",
+    "brand-fit-registry proposals apply",
+    "brand-fit-registry proposals approve",
+    "brand-fit-registry proposals cancel",
+    "brand-fit-registry proposals list",
+    "brand-fit-registry proposals propose",
+    "brand-fit-registry proposals reject",
+    "brand-fit-registry proposals show",
+    "brand-fit-registry rule-signals",
+    "brand-fit-registry rule-signals list",
+    "brand-fit-registry rule-signals show",
+    "brand-fit-registry triggers",
+    "brand-fit-registry triggers list",
+    "brand-fit-registry triggers show",
     "brand-members",
     "brand-members create",
     "brand-members list",

package/dist/index.d.ts

@@ -4,9 +4,6 @@ declare const program: Command;
 /** 返回放错位置字段的指引(无则 null)。用于 accounts update / sync core 防呆。 */
 export declare function detectMisplacedAccountFields(body: Record<string, unknown>): string | null;
 export type VocAcquireClient = {
-    getAuthContext(): Promise<{
-        role: string;
-    }>;
     vocQuery(body: unknown): Promise<Record<string, unknown>>;
     getIntelRunProgress(runId: string): Promise<{
         status: string;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2BpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAiqD9B,8DAA8D;AAC9D,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,GAAG,IAAI,CAOf;AAo+BD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,cAAc,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE,CAAC;AAQF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE;IACN,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CA6JnE;AA0pED,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2BpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAiqD9B,8DAA8D;AAC9D,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,GAAG,IAAI,CAOf;AAs+BD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE,CAAC;AAQF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE;IACN,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAkJnE;AA+1ED,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -2083,17 +2083,8 @@ export async function orchestrateVocAcquire(client, params) {
         },
     });
     try {
-        // 派发前 unrestricted 预检:client 恒拒(第一版;在产生任何副作用前)。
-        const auth = await withDeadline(() => client.getAuthContext());
-        if (auth.role === "client") {
-            return {
-                exitCode: 1,
-                output: {
-                    status: "forbidden",
-                    reason: "voc-acquire 第一版仅 unrestricted 角色(client 恒拒);先派发再发现越权会白占额度",
-                },
-            };
-        }
+        // 无角色预检:权限由服务端强制。voc-query(第一次调用)若无 evidence create 会在**任何派发副作用前**
+        // 403 → 抛出 → 命令层退 1;有权则派发 + 轮询(受限主体持 runId + dimension read 可轮询 /runs/:runId)。
         let round = 0;
         let last = {};
         while (round < params.maxRounds) {
@@ -2203,7 +2194,7 @@ intel
     .command("voc-acquire")
     .description("VOC 有界编排(Hub-native):循环 voc-query --dispatch-on-gap → 轮询 run 到终态 → 重算 coverage 验收 → " +
     "缺口再派一轮。退出码 0=coverage 满足 / 2=尚未满足(超时/多轮后仍缺口,可能需外部 import)/ 1=错误。" +
-    "评估口径同 voc-query;第一版仅 unrestricted 角色;--async 只派发不等待。")
+    "评估口径同 voc-query;受限主体亦可(权限由服务端强制:需 evidence create + 该 dimension read);--async 只派发不等待。")
     .option("--brand-keywords <list>", "品牌词,逗号分隔")
     .option("--competitor-keywords <list>", "竞品词,逗号分隔")
     .option("--subreddits <list>", "板块,逗号分隔")
@@ -3783,6 +3774,178 @@ brandRegistry
         cursor: opts.cursor,
     }), null, 2));
 });
+// ── Trigger 注册表四眼管理面(P1-D3)——只提案/审批/执行,不提供直写命令 ──────────────
+const bfRegistry = program
+    .command("brand-fit-registry")
+    .description("Trigger 注册表四眼管理面:trigger/avoid/rule_signal 的 create/update/scope/mandate/retire 全走 propose→approve→apply(无直写命令)");
+const out = (v) => console.log(JSON.stringify(v, null, 2));
+/** apply 的 stale 友好提示(不解析 message,靠 SDK RegistryProposalSdkError.isStale)。 */
+function handleProposalError(err) {
+    const e = err;
+    if (e && e.isStale) {
+        console.error(`proposal 已过时(staleCode=${e.staleCode}):目标已变更,请 show 最新状态后重新 propose`);
+    }
+    else if (e && e.code) {
+        console.error(`${e.code}: ${e.message ?? ""}`);
+    }
+    else {
+        console.error(e?.message ?? String(err));
+    }
+    process.exit(1);
+}
+const bfrProposals = bfRegistry
+    .command("proposals")
+    .description("四眼提案(propose/approve/reject/cancel/apply/list/show)");
+bfrProposals
+    .command("propose")
+    .description("提交一个 registry 变更提案(RegistryProposalInput)")
+    .requiredOption("--input <json>", 'RegistryProposalInput JSON,如 {"type":"trigger.create","triggerKey":"...","matchDefinition":{...},"scopeMode":"global"}')
+    .requiredOption("--idempotency-key <key>", "幂等键(同 proposer 同 key 返既有)")
+    .option("--expires-at <iso>", "过期时间 ISO(可选,须晚于当前)")
+    .action(async (opts) => {
+    let input;
+    try {
+        input = JSON.parse(opts.input);
+    }
+    catch {
+        console.error("Invalid --input JSON");
+        process.exit(1);
+    }
+    try {
+        out(await requireClient().proposeRegistryChange({
+            input,
+            idempotencyKey: opts.idempotencyKey,
+            expiresAt: opts.expiresAt,
+        }));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
+bfrProposals
+    .command("approve")
+    .description("批准提案(四眼第二只眼;审批人须≠提案人)")
+    .requiredOption("--id <id>", "proposal id")
+    .option("--comment <text>", "审批备注")
+    .action(async (opts) => {
+    try {
+        out(await requireClient().approveRegistryProposal(opts.id, {
+            approvalComment: opts.comment,
+        }));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
+bfrProposals
+    .command("reject")
+    .description("拒绝提案")
+    .requiredOption("--id <id>", "proposal id")
+    .option("--reason <text>", "拒绝原因")
+    .action(async (opts) => {
+    try {
+        out(await requireClient().rejectRegistryProposal(opts.id, {
+            rejectionReason: opts.reason,
+        }));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
+bfrProposals
+    .command("cancel")
+    .description("取消提案(proposed 或 approved;apply 前)")
+    .requiredOption("--id <id>", "proposal id")
+    .action(async (opts) => {
+    try {
+        out(await requireClient().cancelRegistryProposal(opts.id));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
+bfrProposals
+    .command("apply")
+    .description("执行已批准提案(stale→提示重新提案)")
+    .requiredOption("--id <id>", "proposal id")
+    .action(async (opts) => {
+    try {
+        out(await requireClient().applyRegistryProposal(opts.id));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
+bfrProposals
+    .command("list")
+    .description("列出提案(可按 status 过滤)")
+    .option("--status <status>", "proposed|approved|rejected|cancelled|applied|stale")
+    .action(async (opts) => {
+    out(await requireClient().listRegistryProposals({ status: opts.status }));
+});
+bfrProposals
+    .command("show")
+    .description("查看单个提案")
+    .requiredOption("--id <id>", "proposal id")
+    .action(async (opts) => {
+    try {
+        out(await requireClient().getRegistryProposal(opts.id));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
+const bfrTriggers = bfRegistry
+    .command("triggers")
+    .description("trigger 注册表(只读;写走 proposals)");
+bfrTriggers
+    .command("list")
+    .action(async () => out(await requireClient().listBrandFitTriggers()));
+bfrTriggers
+    .command("show")
+    .requiredOption("--key <triggerKey>")
+    .action(async (opts) => {
+    try {
+        out(await requireClient().getBrandFitTrigger(opts.key));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
+const bfrAvoids = bfRegistry
+    .command("avoid-contexts")
+    .description("avoid_context 注册表(只读;写走 proposals)");
+bfrAvoids
+    .command("list")
+    .action(async () => out(await requireClient().listBrandFitAvoidContexts()));
+bfrAvoids
+    .command("show")
+    .requiredOption("--key <avoidKey>")
+    .action(async (opts) => {
+    try {
+        out(await requireClient().getBrandFitAvoidContext(opts.key));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
+const bfrSignals = bfRegistry
+    .command("rule-signals")
+    .description("rule_signal 注册表(只读;写走 proposals)");
+bfrSignals
+    .command("list")
+    .action(async () => out(await requireClient().listBrandFitRuleSignals()));
+bfrSignals
+    .command("show")
+    .requiredOption("--key <signalKey>")
+    .action(async (opts) => {
+    try {
+        out(await requireClient().getBrandFitRuleSignal(opts.key));
+    }
+    catch (err) {
+        handleProposalError(err);
+    }
+});
 const brandFit = program
     .command("brand-fit")
     .description("Persona Brand Fit 分级(persona×brand 正式关系):关系表查看 + 受控迁移 validate/apply");